Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Researchers have disclosed details of a new security vulnerability in GitLab, an open-source DevOps software, that could potentially allow a remote, unauthenti…
Researchers have disclosed details of a now-patched security vulnerability in GitLab, an open-source DevOps software, that could potentially allow a remote, un…
The package gitlab before version 14.0.3-1 is vulnerable to multiple issues including cross-site request forgery, access restriction bypass, arbitrary code exe…
GitLab has addressed a security vulnerability that could have exposed private groups. The flaw existed in the Elasticsearch API thatGitLab Fixed Elasticsearch …
GitLab has recently addressed numerous security vulnerabilities in their latest software releases. While all the flaws belonged to different categories,GitLab …
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js…
Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on- mobile/flare/-/r…
Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on- mobile/flare/-/r…
Upstream changelog: https://gitlab.com/dalibo/postgresql_anonymizer/-/releases [core] CVE-2026-19633: Escalation via custom types, operators and rangevars [cor…
Upstream changelog: https://gitlab.com/dalibo/postgresql_anonymizer/-/releases [core] CVE-2026-19633: Escalation via custom types, operators and rangevars [cor…
Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) have been observed leveraging ClickFix-style lures to deliver a …
Update to version 1.11.1. This version includes a fix for a potential DoS-via-zip-bomb issue. Release notes: https://gitlab.com/sequoia-pgp/sequoia-octopus- li…
In the world of cloud-native computing, security is paramount. The recent announcement by the Cloud Native Computing Foundation (CNCF) about the graduation of …
It makes perfect sense for enterprises as well as enthusiasts. Just ask GitLab
Update to gdk-pixbuf-2.42.2, see https://gitlab.gnome.org/GNOME/gdk- pixbuf/-/tags/2.42.2 for details.
https://gitlab.com/sane-project/backends/-/releases
